Privacy Policy

Last updated: February 23, 2026

This Privacy Policy describes how HexaProxy (hereinafter "HexaProxy", "we", "our"), collects, uses, stores and protects your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and French Law No. 78-17 of January 6, 1978, as amended ("Data Protection Act"). This policy applies to the websites hexaproxy.tech and hexaproxy.me and to all services provided by HexaProxy.

1. Data Controller

The data controller for your personal data is:

  • HexaProxy
  • Address: Albi, France
  • Email: support@hexaproxy.tech
  • Website: hexaproxy.tech

    • For any questions regarding the protection of your personal data, you may contact us at the above email address.

    2. Personal Data Collected

    We collect the following categories of personal data:


    Identification data:

  • First and last name (upon registration on the hexaproxy.me dashboard)
  • Email address

    • Connection and technical data:

  • IP address
  • Connection logs (date, time, duration)
  • Browsing data (pages visited, browser type, operating system)

    • Payment data:

  • Payment data (card number, etc.) is collected and processed directly by our third-party payment provider. HexaProxy does not store any complete banking data.

    • Communication data:

  • Messages exchanged with our support team (email, WhatsApp, Telegram)

    • 3. Purposes and Legal Bases

    Your data is processed for the following purposes:


  • Performance of a contract (Article 6.1.b GDPR): management of your user account, provision of proxy services, billing and payment, customer support.
  • Legitimate interest (Article 6.1.f GDPR): improving our services, security and fraud prevention, managing connection logs for technical diagnostics.
  • Legal obligation (Article 6.1.c GDPR): retention of connection data in accordance with French law, tax and accounting obligations.
  • Consent (Article 6.1.a GDPR): sending marketing communications (newsletters, promotional offers), where applicable. You may withdraw your consent at any time.

    • 4. Data Retention Periods

    Your personal data is retained for the following periods:


  • User account data: for the duration of the contractual relationship, then 3 years after the end of the contract for marketing purposes.
  • Connection data and technical logs: 1 year in compliance with legal obligations.
  • Billing data: 10 years in compliance with accounting and tax obligations.
  • Communication data (support): 3 years from the last contact.

    • Upon expiry of these periods, your data is deleted or irreversibly anonymized.

    5. Data Recipients

    Your personal data may be shared with the following recipients:


  • Authorized HexaProxy personnel: only those who need access to the data to perform their duties.
  • Payment provider: for secure processing of financial transactions.
  • Hosting provider: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France — for hosting our servers and data.
  • Competent authorities: in case of legal obligation or judicial request.

    • We never sell, rent or transfer your personal data to third parties for commercial purposes.

    6. Data Transfers Outside the European Union

    All your personal data is hosted and processed in France by OVH SAS.


    We do not transfer your personal data outside the European Union. Should such a transfer become necessary, we commit to implementing appropriate safeguards as provided by the GDPR (EU Standard Contractual Clauses, adequacy decision, etc.) and to informing you beforehand.

    7. Cookies and Similar Technologies

    The hexaproxy.tech website uses Google Analytics, an audience measurement tool provided by Google LLC, to analyze site traffic and improve our services. Google Analytics sets the following cookies:

  • _ga: used to distinguish users (duration: 2 years)
  • _ga_<ID>: used to maintain session state (duration: 2 years)

    • These analytics cookies are only loaded if you accept cookies via our cookie banner. If you decline or make no choice, no analytics cookie is set.


    The hexaproxy.me dashboard uses only strictly necessary technical cookies:

  • Session and authentication cookies: to maintain your connection and secure your user session.

    • Technical cookies are exempt from consent requirements as they are strictly necessary for the provision of the service. Analytics cookies require your prior consent.

    8. Data Security

    We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, modification, disclosure or destruction, including:


  • Encrypted communications (HTTPS/TLS)
  • Restricted access to personal data for authorized personnel only
  • Secure hosting by OVH in France
  • Regular updates of our systems and software
  • Regular backups

    • 9. Your Rights

    Under the GDPR, you have the following rights regarding your personal data:


  • Right of access (Article 15 GDPR): obtain confirmation that your data is being processed and receive a copy.
  • Right to rectification (Article 16 GDPR): request correction of inaccurate or incomplete data.
  • Right to erasure (Article 17 GDPR): request deletion of your data, subject to our legal retention obligations.
  • Right to restriction of processing (Article 18 GDPR): request suspension of processing in certain cases.
  • Right to data portability (Article 20 GDPR): receive your data in a structured, commonly used and machine-readable format.
  • Right to object (Article 21 GDPR): object to processing based on legitimate interest.
  • Right to withdraw consent at any time, where processing is based on consent.

    • To exercise these rights, contact us at: support@hexaproxy.tech


    We will respond to your request within one month. This period may be extended by two months for complex requests, in which case we will inform you.


    If you believe your rights are not being respected, you have the right to lodge a complaint with the French Data Protection Authority (CNIL):

  • Website: www.cnil.fr
  • Address: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France

    • 10. Changes to This Policy

    We reserve the right to modify this Privacy Policy at any time. Any material changes will be notified to you by email or by a visible notice on our websites.


    The date of the last update is indicated at the top of this document. We encourage you to check this page regularly.

    11. Applicable Law and Jurisdiction

    This Privacy Policy is governed by French law.


    In the event of a dispute, and failing amicable resolution, the courts of Albi, France shall have exclusive jurisdiction.

    12. Contact

    For any questions about this Privacy Policy or to exercise your rights, you may contact us:


  • By email: support@hexaproxy.tech
  • By mail: HexaProxy, Albi, France
  • Via WhatsApp Business